Network vulnerability assessment

Abstract

A method to assess network vulnerabilities of devices may include accessing, by a relay device, a network that includes a firewall to separate the network from external networks such that the relay device is coupled to the network from behind the firewall attached to the network. The method may further include establishing a communication channel over a secondary network between the relay device and a monitor system. The method may further include detecting one or more devices behind the firewall attached to the network by the relay device. The method may also include after establishing the communication channel and detecting the one or more devices and while the relay device is coupled to the network from behind the firewall attached to the network, performing, by the monitor system, one or more network vulnerability assessments on the one or more devices via network communications that pass through the relay device.

1 . A method comprising:
 establishing, by a relay device, a first connection to a first network that includes a first network device;   establishing, by the relay device, a second connection over a second network with a monitor system;   after establishing the first connection, monitoring, by the relay device, a first network latency between the relay device and the first network device over the first network; and   after establishing the second connection, monitoring, by the relay device, a second network latency between the relay device and the monitor system over the second network, the monitor system configured to adjust a network vulnerability assessment of the first network device based on the first network latency and the second network latency.   
     
     
         2 . The method of  claim 1 , wherein the second network includes a mobile data network and the second network is a different network type than the first network. 
     
     
         3 . The method of  claim 1 , wherein the monitoring the first network latency and the monitoring the second network latency occurs in response to a request received at the relay device from the monitor system. 
     
     
         4 . The method of  claim 1 , wherein the adjustment of the network vulnerability assessment by the monitor system may include adjusting a timing for determining a status of a port of the first network device. 
     
     
         5 . The method of  claim 1 , further comprising in response to a change of a combination of the first network latency and the second network latency being greater than a change threshold, providing, by the relay device, an updated first network latency and an updated second network latency to the monitor system. 
     
     
         6 . The method of  claim 1 , further comprising monitoring, by the relay device, a third network latency over the first network between the relay device and a second network device of the first network. 
     
     
         7 . The method of  claim 6 , further comprising providing, by the relay device, the third network latency to the monitor system, the monitor system configured to adjust the network vulnerability assessment of the second network device based on the third network latency and the second network latency. 
     
     
         8 . A relay device comprising:
 one or more processors;   one or more computer-readable media coupled to the one or more processors, the computer-readable media configured to store instructions that, when executed by the one or more processors, are configured to cause the relay device to perform operations comprising:
 obtain a first network latency between the relay device and a first network device over a first network; 
 obtain a second network latency between the relay device and a monitor system over a second network, the monitor system configured to adjust a network vulnerability assessment of the first network device based on the first network latency and the second network latency. 
   
     
     
         9 . The relay device of  claim 8 , wherein adjustment of the network vulnerability assessment by the monitor system may include adjusting a timing for determining a status of a port of the first network device. 
     
     
         10 . The relay device of  claim 8 , wherein the obtain of the first network latency and the obtain of the second network latency may each occur in response to a request received from the monitor system. 
     
     
         11 . The relay device of  claim 8 , wherein the obtain the first network latency and the obtain the second network latency occur a plurality of times during performance of the network vulnerability assessment of the first network device.